header length 61951 instead of 46

Stephen Misel steve@neonova.net
Tue Feb 24 16:08:44 UTC 2004


On Tue, 2004-02-24 at 10:48, Vernon Schryver wrote:
> Does anyone know what or who is responsible for the junk bombarding
> the public DCC servers?  Some of it consists of empty UDP/IP packets.
> Others consists of junk that causes the servers to complain
> "header length 61951 instead of 46"
> 
> I finally reached an ISP that seemed to be responsible for the empty
> packets.  They did not tell me what they were doing, but they stopped.
> 
> Most of the bad header length junk has come from 206.171.8.0/24
> but 209.153.212.10 and 12.1.96.5 have also been implicated.
> 206.171.8.0/24 is owned by PacBell and delegated to Joseph Zott
> I've tried sending mail to PacBell and jaz@itvcorp.com without success.
> The reverse DNS for 206.171.8.0/24 is ancient and wrong.
> 
> 
> Vernon Schryver    vjs@rhyolite.com
> _______________________________________________
> DCC mailing list      DCC@rhyolite.com
> http://www.rhyolite.com/mailman/listinfo/dcc

Both of these hosts respond to a HELO with a hostname of barracuda,
which leads me to believe it's some sort of appliance...

http://www.barracudanetworks.com/products.php

.. seems to fit the bill.

-Steve




More information about the DCC mailing list

Contact vjs@rhyolite.com by mail or use the form.